IT Mystery - Rogue IP hiding on our network!

[Ramma2]

Ok so we have this IP address on our network, we can ping it, but it isn't running any of our usual applications (VNC, AVG, etc). The device is using the same name on the network as one of our normal computers and yet no errors are thrown when that PC connects.

What else can we do to track down what this is?

Edit: And I know it is not connecting via our wireless connection, I disabled the WAP and was still able to ping the address.

 

[spidey07]

get the mac address from arp tables (arp -g on a host) or show ip arp x.x.x.x on a router

track down mac address in switch by looking at the mac or forwarding tables to find the port.

shut down port.

 

[Genx87]

Spidey07 said it best, shut it down and wait for somebody to come crying. It has never failed to find out who it is for me.

 

[Ramma2]

Bleh I don't have the creds for the switches and the net admin just left.

I won't be able to sleep tonight!

 

[Genx87]

How are you dishing out IP addys?
You could set a rule and give it an invalid Gateway, DNS ect until the network admin shows up.

 

[Ramma2]

I don't think it is a PC on the network since it doesn't have our antivirus or vnc client installed. It could be some printer or print server, but not sure.

 

[nweaver]

namp it